280 matches found
Pribado
🔐 Pribado Gestion privée des clés API & infrastructure Zero-Knowledge Pribado est une plateforme auto-hébergeable et Zero-Knowledge pour la gestion de clés API, de secrets chiffrés et de communications privées. Construite sur Oasis Sapphire pour le calcul confidentiel adossé au matériel. ✨...
Malicious Package
Overview alleged-sapphire-beetle is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
Malicious Package
Overview icy-sapphire-bat is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview icy-sapphire-zebra is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
In this article 1. Sapphire Sleet’s campaign lifecycle 2. Defending against Sapphire Sleet intrusion activity 3. Microsoft Defender detection and hunting guidance 4. Indicators of compromise Executive summary Microsoft Threat Intelligence uncovered a macOS‑focused cyber campaign by the North Kore...
Dissecting Sapphire Sleet’s macOS intrusion from lure to compromise
In this article 1. Sapphire Sleet’s campaign lifecycle 2. Defending against Sapphire Sleet intrusion activity 3. Microsoft Defender detection and hunting guidance 4. Indicators of compromise Executive summary Microsoft Threat Intelligence uncovered a macOS‑focused cyber campaign by the North Kore...
Mitigating the Axios npm supply chain compromise
In this article 1. Analysis of the attack 2. Mitigation and protection guidance 3. Microsoft Defender detections 4. Indicators of compromise 5. Hunting queries On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP...
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
EUVD-2025-120022
Malicious code in flexiblehummingbirdsapphire-15 npm...
EUVD-2025-120008
Malicious code in unchangedplanariansapphire-50 npm...
EUVD-2025-120004
Malicious code in zonal-sapphire-antlion npm...
EUVD-2025-117129
Malicious code in reliable-sapphire-pigeon npm...
MAL-2025-138831 Malicious code in legitimate-sapphire-snipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb442d7e77a075510fa58f4d1e91597d9277c0b4301b571c098f7a36dced6f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in permanent-sapphire-panda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in reliable-sapphire-pigeon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d415cdb3b27d3a025bec726f6bb6bf6c68fa1d5b0a883b2f8f947f9ee180e061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117470
Malicious code in confused-sapphire-scorpion npm...
EUVD-2025-117376
Malicious code in flexible-sapphire-spider npm...
EUVD-2025-117271
Malicious code in legitimate-sapphire-snipe npm...